$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa File: c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa (raw, json) Hash identifier: ICCbwFGjMlpCbwWw0xouWfAa7q1Kicn8lILbdBfRFOY= Subject key identifier: FE:E1:21:E4:14:C2:8A:77:EB:C4:64:E2:63:FC:E9:6A:3A:CB:C0:A7 Certificate issuer: /CN=5fa520a3-7c82-4745-8817-8dd86a2e0796 Certificate serial: 010D0C9F4328584AD3A12AB405C29EA734D19800 Authority key identifier: 59:6D:A8:B0:1C:B6:DA:E7:F9:EC:3A:58:48:D1:56:40:0E:41:94:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 1832 IP address blocks: 129.119.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:2a:b4:05:c2:9e:a7:34:d1:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa520a3-7c82-4745-8817-8dd86a2e0796 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=59b01d87-01f8-40a4-ab56-0659313a4e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:8a:a9:9c:91:51:0e:94:c4:73:6c:a8:52: 9c:e0:b5:a3:82:f4:33:c8:8b:af:b7:e9:aa:58:44: 5e:2e:6d:88:54:9c:ad:81:e9:78:dd:45:80:1d:76: 02:aa:84:b1:77:18:24:93:3a:6a:d3:06:ae:13:79: 65:8e:ac:70:68:a5:13:a0:7d:e4:d2:59:58:be:62: 30:e2:af:38:1b:8d:a3:e9:d9:40:a0:5e:69:d8:d7: e4:2d:a3:c8:c2:b0:b0:ec:d1:64:0e:ef:2e:52:75: b5:02:fa:f7:2e:a0:df:da:cf:4f:16:2b:06:d2:94: f9:81:48:c3:94:77:61:45:c8:3d:ef:3b:0c:48:24: 2c:85:1f:2f:11:41:88:44:1e:e7:8e:46:eb:a6:c6: 74:d4:15:39:73:7f:43:fe:87:3a:15:cc:77:b8:c6: e9:18:58:54:23:52:8d:38:1d:c4:f6:dc:e8:51:55: 85:86:d6:91:1c:ae:92:0f:6a:2c:51:2e:21:0a:6a: e8:de:87:01:3b:2b:ab:09:90:69:9f:f1:b3:4f:72: 6d:ba:30:6d:98:e8:14:bc:c9:4b:47:1d:4a:cb:bb: 7a:2c:66:90:44:cf:68:a4:b9:c7:b8:ed:9c:85:75: 0b:ef:8b:30:07:cf:23:60:d9:98:bf:ab:b2:63:7d: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E1:21:E4:14:C2:8A:77:EB:C4:64:E2:63:FC:E9:6A:3A:CB:C0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/c5cc77cc-b6c6-3dde-84f0-332f409b7005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796/5fa520a3-7c82-4745-8817-8dd86a2e0796.crl X509v3 Authority Key Identifier: keyid:59:6D:A8:B0:1C:B6:DA:E7:F9:EC:3A:58:48:D1:56:40:0E:41:94:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5fa520a3-7c82-4745-8817-8dd86a2e0796.cer sbgp-ipAddrBlock: critical IPv4: 129.119.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2d:36:49:e3:95:12:07:e5:b1:71:67:ab:6e:6e:b5:9c:f0: 28:aa:d2:1f:a9:80:c1:86:0f:7d:f3:df:3b:fa:9b:1c:c7:af: fc:24:40:8b:de:40:16:92:e3:0f:c2:8e:bc:ab:ca:eb:3a:56: 17:4d:b5:b4:1f:43:e8:a3:25:d6:ea:8e:2a:01:28:b5:f9:73: 89:51:a9:5d:b0:55:73:c5:3c:98:10:f8:99:5b:2f:a3:59:10: 4b:9c:50:36:ab:24:ea:e7:31:fe:1d:cf:f6:bf:f9:2c:9c:ce: d6:a4:c6:ec:96:35:2a:23:52:3a:08:2a:d2:f0:47:1c:f2:92: 19:3e:70:e1:db:d7:aa:79:20:a6:4a:5c:0e:e7:1f:17:eb:9b: 78:07:11:7f:60:a9:5b:f1:b8:43:58:90:ea:71:77:33:93:7f: 07:9f:40:40:43:8a:f4:0d:8b:51:62:c7:60:0b:7e:9e:04:48: 77:ec:d6:ba:9e:21:a4:76:87:51:5e:7f:84:20:e0:0b:5b:42: 0a:cb:92:08:c7:99:be:b8:5c:ab:8e:10:96:73:95:c4:0d:72: be:fd:a2:df:61:62:7e:1c:36:ba:57:fe:7e:0c:b2:96:9a:96: 6e:74:89:4c:4d:4d:92:87:00:06:05:77:c1:1f:d1:9b:11:9f: 64:aa:52:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSq0BcKepzTRmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhNTIwYTMtN2M4Mi00NzQ1LTg4MTctOGRkODZhMmUw Nzk2MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NTliMDFkODctMDFmOC00MGE0LWFiNTYtMDY1OTMxM2E0ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW2KqZyRUQ6UxHNsqFKc4LWjgvQzyIuvt+mq WEReLm2IVJytgel43UWAHXYCqoSxdxgkkzpq0wauE3lljqxwaKUToH3k0llYvmIw 4q84G42j6dlAoF5p2NfkLaPIwrCw7NFkDu8uUnW1Avr3LqDf2s9PFisG0pT5gUjD lHdhRcg97zsMSCQshR8vEUGIRB7njkbrpsZ01BU5c39D/oc6Fcx3uMbpGFhUI1KN OB3E9tzoUVWFhtaRHK6SD2osUS4hCmro3ocBOyurCZBpn/GzT3JtujBtmOgUvMlL Rx1Ky7t6LGaQRM9opLnHuO2chXUL74swB88jYNmYv6uyY32VYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7hIeQUwop368Rk4mP86Wo6y8CnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZmE1 MjBhMy03YzgyLTQ3NDUtODgxNy04ZGQ4NmEyZTA3OTYvYzVjYzc3Y2MtYjZjNi0z ZGRlLTg0ZjAtMzMyZjQwOWI3MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWZhNTIwYTMtN2M4Mi00NzQ1LTg4 MTctOGRkODZhMmUwNzk2LzVmYTUyMGEzLTdjODItNDc0NS04ODE3LThkZDg2YTJl MDc5Ni5jcmwwHwYDVR0jBBgwFoAUWW2osBy22uf57DpYSNFWQA5BlDYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZmE1MjBhMy03YzgyLTQ3NDUtODgxNy04ZGQ4 NmEyZTA3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgXcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEtNknjlRIH5bFxZ6tubrWc8Ciq0h+pgMGGD33z3zv6mxzHr/wkQIve QBaS4w/Cjryryus6VhdNtbQfQ+ijJdbqjioBKLX5c4lRqV2wVXPFPJgQ+JlbL6NZ EEucUDarJOrnMf4dz/a/+SycztakxuyWNSojUjoIKtLwRxzykhk+cOHb16p5IKZK XA7nHxfrm3gHEX9gqVvxuENYkOpxdzOTfwefQEBDivQNi1Fix2ALfp4ESHfs1rqe IaR2h1Fef4Qg4AtbQgrLkgjHmb64XKuOEJZzlcQNcr79ot9hYn4cNrpX/n4Mspaa lm50iUxNTZKHAAYFd8Ef0ZsRn2SqUrM= -----END CERTIFICATE-----Generated at Thu Aug 21 06:59:07 2025 by rpki-client